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(57) Abstract 

A method of, and appaiaui* for, 
doing bu$inef^<c rnutsactlons on a net- 
wuik (44). 3uch D5 the Inteiflet (44), 
is described. Purchases ints wairied 
out in a serjire way such that Iheit is 
a luinimum poaaibiUty that the cus- 
tomers financial or billiiig infonna- 
tion can hft stolen. An input device 
(10), such aa a cet top box, televi- 
sion browser, is proviUcU at a cus- 
tomer' « location- The input device 
(10) has a unique identification coHft 
(UlD/blD and card ID), niis code is 
stored on a fir!^t server (42) connected 
10 a network (4-1), such as the Tn- 
lemet (44}, prior to cwiducilng any 
transactionR. Cu<:iomer specific ftnan- 
uial and/or billing infoftnation (DBl) 
is also stored on tne first wivcf (42). 
The cusTOTTiftf is then connected to the 
desired location (50) on the nctworV 
(44) tnrough a second scivcr (46) to 
condurr tiansaciion. The ioeniifica- 
tion code (UIP/SID and card TH) of ™„.rr^d tn the networiC (44). The second seivci (4^) has secure acces, 

the input device (10) i. also provided to ^J^^^""^^''^^^^ Where the input device (10) Is a 

(aS) TO the CQStomer specihc informauon PBI) louiicd on the (30) can be provided by ^ vP.nrior. 

Lt top box brosvcer (10), a .man P'^I^f .^^^^^ StJ A v^^^^^^^^^ ^l^iU the srnaxl Jrd (32) into the input 

?32i. Uor^ be dou^nloaded frctn the vendor's website to the customer s sniait card (32). 




•10 



FOR THE PURPOSES OF JNfOttMATION ONLY 
Cudc U3cd to Identify Sotee pony to *e PCT «i fmnt pages of pamphlets pubmhmg mtcmailona) -pplic.Uo.^ under the PCT. 



At. 




AM 




AT 




AU 


Australia 


A7. 


Axerfaiuifln 


BA 


BosnU and Herrrs"^* 


VB 




BE 




BF 


Borklna Foso 


nr. 


&uli*arta 


BJ 


Benin 




DruH 


Ul 


Belarus 


ca 


CanaiU 




Cciunl African Republic 


cc 




CH 


Switsvrlwtf 


CT 


COic U*Tvuuc 


CM 


Cini croon 


CN 


China 


cu 




cz 


Cccch Republio 


DC 


Ociilldil/ 


DK 


Denmsrk 


C£ 


Gitonia 



ES 


Spain 


LS 




Ff 


FinlonH 


tT 


Uthuania 


PR 




lU 


Ijixembouif 


OA 


Gabon 


LV 




GB 


United Kifigdom 


MC 


Moiwvv 


GE 


Ccorcia 


MD 


KcpuDllC of MoWova 


CU 


Chan* 


MG 


M&dazBJcor 


ON 
GX 


Guinea 


MK 


IV. former YufiOslav 
Republic of MftcedanJ* 


HU 




ML. 


M«Ii 


IB 




MM 


Mongplia 


IL 




MR 


Maunionia 


IS 


leelaAa 


MW 




IT 




MX 


Mexico 


JP 


Japan 


rns 


Niger 


KE 


Kenya 




Nctncnonos 


KG 


Kynjyzscan 


NO 


Norway 


KP 




N7. 


New Zealand 




RcyvDlic &f Kofta 


PL 


Polwd 


KK 


KcpQDiic Of Korea 


PT 


Ponusal 


KZ 


Kazaksion 


RO 


Komonia 


LC 


.^ainr I.iicia 


RU 


Russian Fedention 


lA 




.^0 


Sudan 


hK 


aiiUuXa 


C£ 


5w«d«n 


LK 


UDcria 


50 





SI 






SlOVflWa 






sz 


SwaziUnd 


TD 


Chad 


TO 


Togo 


TJ 


T&jiKistan 


TM 


Turbnenckift 


TR 




TT 


TVinidwi trnj TnJwgrt 


UA 


Ukraine 


DO 


Uganda 


us 


Uniicd States or America 


UZ 




VN 




YU 


Yugoslavia 


rw 


ZlujbaUwc 



wo 00/43962 



PCTrtJSOO/01379 

A METHOD AND APPARATUS OF PROVIDING 
SECURE TRANSACTIONS ON A NETWORK 



Background of the Invontion 

Field of the Invention 

The present Invention relates to a method of, and apparatus tor, allowing 
a customer to shop and purchase products or services on a wide arfta network, 
such as the internet, in a way that insures that any transactions as well as 
customer financial and billing information Is secure. 

Related Art 

• NetworlCS work by sending information from computer to computer (or 
server to server) until information reaches its destination. The Internet, and 
more specifically the World Wide Web {hereinafter referred to collectivRiy as the 
"intemet"), is a vast world wide network, used for a variety of purposes 
including purchasing goods end oorvlces. More specifically, the Internet is a 
global communications network, comprised of a network ot networks which are 
both public and private. The world wide web (www), is a .subset of the 
internet. The world wide web allows people to jump from one server to another 
simply by selecting a highlighted word, picture or icon about which they want 
mora information. This is a maneuver which is nailed a "hyperlink". To use the 
world wide web a user loads a special navigation program, called a web 
browser, onto his or her computer or other device Which is connected to an 
Internet service provider, most typically by means of a telephone line. The 
Internet service provider is connected to one of the networks making up the 
Internet. 

The typical connection of most users to the Internet is via e personal 
computer which is connected through a telephone link to an Internet service 
provider. More recently, however, a company known as WebTV Networks has 
pioneered the Internet television market. WebTV Networks offers a system 
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wherein the u«r can watch television and, aleo. from the e,m. television set. 
ac«.» the intemet. DSS, or satelllte-liniced television, oleo provide, en Internet 
link to uscre. 

When data is sent from polm A lo point B, every computer .n between 
has en opportunity to look at what's being sent. This can pose a security 
problem. For example. If a potential buyer using the Internet is viewing a 
catalog from a vendor and decides to make e purchase, the user ha« to provide 
information into an order torn, from his PC or ect top box. The information, 
typically, includes the purchaser's mailing eddrcss and credrt card number. This 
Information then passes frum computer to computer on the way to the vendor. 
It is possible that along the way criminals can intercept this information, 
including the credit card information, and use the information to the detriment of 
the purchaser. 

To combat such illegal activity, a number ot approaches have been laken 
to allow such purchase transactions to take place with greater security. 
-Secure" sites have been set up which provide measures to prevent 
unauthorized people from seeing the data sent to or from those sites. SSL 
(secured socket layer) is a an encryption based security technology used or, Ihe 
Internet. But SSL hos not been proven to be completely secure and some users 
have hesitated to use this approach to pay for goods bought over th« Internet. 

WebTV, a trademark of WebTV Network, Inc., a subsidiary of Microsoft 
Corp., Is a trademark which relates to a television browser which allows a 
consumer to have access to and browse the Intemet, as well as communicate 
through electronic mail, by using a television Instead of a personal computer or 
other input device. A number of consumer electronics industry leaders, 
including Sony Electronics Inc. are licensed to provide hardware for use with 
WebTV Networks television browsers. The hardware includes standalone 
set-top browser boxes as well as Integrated devices. Tor example, Sony 
markets a model lnt-W200 for television browsers and Internet access. 

Television browsers appeal to a diverse consumer marketplace since it 
offers Intemer access lO consumers which is affordable and easy to uce. With 
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the expanded use of television browsers the amount of purchases over the 
Internet will increaee. This, in turn, will increase the need for means for ineuring 
the security of purchase transactions. 

Summary of the Invention 

In accordance with the invention, a method, and apparatus for, doing 
business transactions on a networic, such as the internet, is desnribed. More 
particularly, business transactions, such as purchases are carried out In a 
secure way such that there is a minimum possibility that customer financial or 
billing infoimation can be stolon. In accordance with The invention an Input 
device, such as a set top browser box is provided at a customer's location. 
The input device has on embedded unique identification code. The unique 
identification code for a customer's input device is stored on a first server 
connected to a networl<, such as the Internet, prior to conducting any 
transactions. Customer specific financial and/or billing information is also 
stored on the first server along with the unique identification code for the input 
device prior to any transactions taking place. The input device provides a 
location on the networic to be connected when It is desired to conduct business 
transactions. In the case of the Intemet. the location is the URL location of the 
desired web site. The customer is then connected to the desired location on the 
network to conduct a transaction such as a purchase. 

The identification code of the input device is also provided to a second 
server connected to the network, such as the Internet. The first server has 
secure access to the customer specific information located on the scoond 
server. This is accomplished, for example, through encryption or by a secure 
line. The customer Is free to conduct a transaction end money is transferred to 
the remote location without revealing the customer credit card or billing 
information at the remote location. The customer is then billed independently of 
the transaction at the remote location. 

Where the Input device is a set top box browser for cable or satellite 
television system, a smart card port is sometimes provided. A serial number 
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associaied with the smart card is also provided to the second server when a 
transaction is desired. The input device can be any device having acccos to the 
network, including a P.C and should not be limited to the input devicco 
described herein. 

5 In accordance with another aspect of Ihe Invention, as q marlceting 

device, a smart or other card can be distributed by a vendor. The smart card is 
encoded with the URL location of the vendor's website. A userneeds only 
insert the smart card into the inpul device, such as a television set top box 
browser, to automatically be connected to the vendor's website. By using a 

1 0 smart card, information can be downloaded from the vendor's website to the 

customer's smart card. 

The foregoing and other objectives, features and advantages of the 
invention will be more readily understood upon consideration of the following 
detailed description of certain preferred embodiments of the invention, taken in 
1 5 conjunction with the ducompanying drawings. 

Brief Dcoorlptlon of the Drawings 

Figure 1 is a block diagram of an Information retrieval system according to 

the invention. 

Figure 2 is an illustration Of a menu displayed on a television set of the 
20 system depicted in higure 1 . 

Figure 3 is a block diagram Illustrating the combination of a television sot 
with a set top box browser usable with a smart card. 

Figure 4 is a diagram of a standard smart card. 

Hgure 5 Is a block diagram illustrating the method and apparatus of 
25 providing secure transactions over a network in accordance with the invention. 

Figure 6 Illustrates a rnayazine which Is provided with a tear out smart 
card for use by a consurnei to purchase goods over the Internet. 

Figure 7 illuslrates a set top box having two smart card porte. 
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Detailed Description of the Preferred Embodiment 

Referring now to Fig. 1 , in one embodiment, □ user input terminal 1 0 for 
a television browser connected io a user's televiaion eat 12. User input rlevice 
10 is commonly referred to as a 'set top box". The eet top box 10 m?.y he 
connerted to a television antenna or cable television system 14 which provides 
a source of broadcast television signals to the set top box 10. Also connected 
to the terminal 10 is a user device 18, such as a keyboard, mouse, or remotely 
controlled cursor device. A printer 1 6 may also be connected to the set top box 
10. The set top box 10 Is connc'otcd through telephone lines 20 to an ISP host 
22. The host 22 Is part of a multiple user network. The host 72 sends 
information signals via a commercial broadcast transmitter 24 to he broadcast 
' over an antenna 20, through a commercial cable system, or via ..^ateliite. 

• The information supplied by the host 22 to the tran.c^mttter 24 is high 
bandwidth data which is embedded in the conventional TV broadcast signal. At 
the set top box 10 is a video modem (not shown) which can receive the iiiyh 
bandwidth signal embedded in the conventional TV broadcast and whicli can 
strip out the embedded data without disturbing the conventional TV broadcast 
signal. The stripped out data is then passed on to the television re»;eiver 1 2. 

The input device 10 is actually a special purpose computer loaded with a 
form of a web browser whir.h presents a display 29. Fig. 2, on the television 
act 12 allowing the user to send and receive E-mails, visit chat rooms and use 
net groups, find local sites and services, and search and find subjects on the 
Internet as well as download full screen, full molion video and sound files. The 
above-described existing system allows a user of the set top box 10 to browse 
the Internet or other intormation content provided directly to the ISP host 22 by 
a content provider 78 and. if desired, to puniout that information on the printer 
16. 

Fig. A shows the television 12 and set top box 10, with the set top box 
provided with a slot 30 which receives a conventional smart card 32. Smart 
carrt.s allow customers the opportunity to purchase goods or services online. A 
sm;»rT card has Integraied circuit chips embedded within a plastic c.rrt. ihe 
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expression smart card was actually coined to describe a plastic card containing a 
microchip with processing capability. Today there are still more such cards 
containing just a memory chip which form the core of the telephone cards that 
have been so widely used in France and Gar.nany. The more correct express.on 
to cover all such cards is an Integrated circuit card (ICC) as defined in the 
current ISO standards- The card 32. shown in Fig. 4. is 85.emm x 53.98mm x 
0.76mm which is the same as the ubiquitous banic card with its magnetic stripe 
that is used as the payment instrument for numerous financial transactions. For 
purposes of this patent, the term "smart card" will bo used synonymously with 
"ICC card. 

It should be understood, however, that the present invention is not limiied 
to such a standard smurt card as described above. A non-standard smart card 
can be used. Also, where downloading of information is not required, a 
standard type magnetic bank or credit type card can be used to provide, for 
example, URL information. 

Rg. 5 is a bloclc diagram illustrating the method and apparatus of 
providing secure transactions over a network in accordance with the invention. 
The secure system 40 includes one or more set top boxes 10 which are located 
at the customer's home, office or other desired location. Set top boxes 10 are 
provided with modems that connect through telephone lines 20 to a network 
such as the Internet ae explained above. For purposes of Illustration, thie 
Internet will be the only network diseased. It should be understood, however, 
that the present invention Is nor limited to the Internet but has application on 
any network or wide area networic system. Further, while ihe invention 
described herein uses telephone lines to connect the consumer to the Internet, 
the invention should not be .«?n limited. Other access modes such as cable, 
satellite and fiber optical cables could be used to carry ouL liie present invention. 
For satellite connections the boxes are referred to as liiiegrated Receiver 
Decoders (IRDs). 

Set top browser boxes 10. whether stand-alone or integrated into a host, 
use the arnhitecture for the particular application, for example, the television 
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brows r architecture. Each set top unit, whether It be a stand alone or 
integrated into a television set or other host, has a unique identification code 
(UID or SID) asisociated with it. This code is embedded within the set top unit 
and the user gfinerally does not havtj access to it. 

Connected to the Internet is a first data base (DB1 ) which is stored on a 
first computer or server 42 of an Internet service provider. This database 
contains the UID or SID for the customer's set top box. It oloo contains 
financial information for each customer necessary for on-line shopping. For 
example, billing Information, credit information, and credit card numbers are 
..stored in this data base, A high degree of security can be ensured for this 
stored Information. Some Internet television companies, for example, have thP.ir 
own inTerna! network which is available only to its users. Information about the 
customer may already be stored this data base. Importantly. DB1 , containing 
the customer billing and credit card information, is created before any 
transaction on the Internet takes place and Is entirely independent of, and 
separated from, actual on-line shopping. 

Like a conventional credit card, information can be stored and read from 
a smart card 24. However, the amount of information which can be stored Is 
significantly greater on a smart card. Also, unlike a conventional credit card, 
j^lormation can bo down loaded and stored on the smart card. A smart card 
can have a serial number encrypted on it tor additional security purposes. 

To do a transaction, smart card 32 is inserted Into port 30 of sbI lop 
box 10, The serial number of smart card 32, along with the unique ID from the 
set top browser 10, is sent via the Internet 44 to a second database, DB2, 
located at server 46 at a second Internet service provider. Server 46 could, for 
example, be a server provided by the set Top box manufacturer such as Sony 
Corp. or could be the Internet television server or any other provider's server. 
When a customer in.serts smart card 32 for the first time, set top box 10 
connects to the second database, DB2 and sends the unique ID and serial 
number of .<:mart card 10. There the second database server, DB2, creates a 
new data nombinatlon of the unique ID and serial number of smart card 10 after 
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verification of the eame data combination stored previously. Only when server 
46 ho9 the unique ID of set top box 10 and the serial number of the user's 
amort card can server 4B gain access to the financial and billing information of 
the customer, located in DBl at server 42, via a secure line, ouch as a dedicated 
line 48 or through an encrypted signal. 

Service provider 46 then connects tiie user to the desired shopping 
location or service 50. based on the URL location. Should the customer desire 
to make a transaction such as a purchase, the customer aimply indicates that 
the purchase is to be made, with no requirement of sending credit card 
information or any other financial information to the shopping Gorvice. The 
shopping server 50 sends tiie customer's shopping instructions along v^ith the 
serial number of the smart card as the customer's identification to service 
provider 46. Then service provider 46 takes care of the transaction, relying 
upon the secure lirre 48 to DDI for customer billing and financial information. 
The customer can then be charged or sent a monthly bill. 

The use of a smert card 32 offers unique marketing advantages. For 
example, a shopping service can hand out or mail smart cards with the Internet 
URL for their website stored on the smart card. When the user inserts the 
smart card into the sot top browser 10, the user is automatically linked with the 
website of the shopping service. This is accomplished as follows. 

As explained above, the user's set top box 10 or similar input device 
contains a unique identification embedded within It. such as Silicon ID (SID). 
This SID is stored in DBl, the primary data base tor each customer's billing 
information, credit card number, address and other financial information. The 
smart card 32, in the Internet application, contains the URL for the server 46 
containing DB2 as well as the merchant's UHL if DB2 is separate from the 
rrierchant's shopping server or e-nommerce server (E-5hop). The smart card can 
contain its own unique identification or serial number, which is different from 
the SID of the input device. 

When the customer Inserts the smart card 32 into the set top box (input 
device) 10 the customer Is connected to DB2. If Uie smart card provided by the 

8 



PCT/tJSOO/01379 

WO 00/43962 

merchant has no unique serial number, in one embodiment, DD2 issues it a 
unique serial number which is then stored on the smart card. At this point DB2 
rcade both the serial number for the smart card ar^d the SID for the set top box. 
DB2, if desired, can prompt the customer for an input password for additional 
security. DB7 also stores the password. DB2 can also prompt a customer to 
provide additional Information for personalized or customized shopping sites for 
the particular customer. Once DB2 is provided with the SID, smart card serial 
number, and password (If required), DB2 directs the customer to the desired 
shopping site's e-commerce server (E-SHOP). 

After a transaction, such as a purchase, telccs place at the desired 
shopping location, E-SHOP notifies DB2, Identifying the purchaser's SID and 
■ serial number and thai a transaction has taken place. At this point, DB2 sends 
a request to DBI lo complete the transaction at the customer's end. Since DBI 
already has customer billing Information associated with the customer's SID, thR 
customer is chdrged in accordance with the pre-determined billing arrangement, 
and the cuslomer can be notified by o mail that the transaction has been 
compltfied. 

While the embodiment herein describes DBI, DR:^, and the shopping 
service {E-SHOP) has three separate servers, in fant. any two or all three could 
be combined into a single server. DBI, or a cluster of servers comprising DBI 
should have the capability of insuring that the customer can and will pay For Lhe 
purchase. By providing customer specific information only on DBI gredler 
security is assured than with many present available security techniques. 
Additionally, DB2 can also have customer profile Informalion useful to the 
shopping service. In this sense, DB2 can act as a "middleman" between the 
merchant and the customer, or selected customer bases. 

With the smart card, information can be down loaded from the shopping 
service website. For example, if a customer makes a purchase, the shopping 
service may wish to put the customer in a "preferred" customer classification. 
This can be done easily by downloading a new URL site onto the customer's 
smart card so that the next time the customer inserts the smart card, the 
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customer sjets preferred treatment. Also, by having the abilitv lo down load 
informatiun onto the amort card, a particular group of customers can be targeted 

for special information. 

Fig. 6 illustrates a magazine hO having an adverlisement 52 which has 
5 affixed to it a smart card 54 provided by the advertiser, for use by o consumer 
to purchase goods over the Internet, The smart card 54 is secured to the 
magazine page by. for example, an adhesive. The customer simply peele off the 
omart card and inserts it into the set top box, and automatically is connected 
with the vendor's website on the Internal. 
10 Since an ariverriser-provider sinait card would not have a customer serial 

number associated with It. a second smart card port can be provided, as shown 
in Fig. 7. With this arrangement llie customer inserts his smart card 32 from 
which hi!5 smart card serial number Is read and sent to DB2. The 
vendor-provided smart card 54 Is inserted into the sooond smart card port 56. 
1 5 providing the vendor URL information. 

Although the present invention has boon shown and described with 
respect to preferred embodiments, various changes and modifications are 
deemed lo lie within the spirit and scope of the invention as claimed. The 
corresponding structures, matcriale, acts, and equivalents nf all means or Step 
20 plus function elements In the claims which follow are intended to include any 
sUucture, material, or acts for performing the functions in combination with 
other claimed elements as specifically claimed. 

As an example, the subject invention is not limited to television browsers 
or a set top box or for a particular form of data transmission. The subject 
25 invention is applicable to any system which has an input device with an 
imbedded, unique identification. 



10 



PC1*/USOO/01379 

WO 00/43962 

Claims 

What is claimed is: 

1 . A method of conducting business transactions on a network (44) 
comprising: 

storing customer specific billing information (DBl ) on a first server (42) 
connecied to the network (44) along with a unique identification code (UID/SID 
a„d card ID) for e customer's input device (ID) prior to any transactions; 

locating o desired location (50) on the network (44) to conduct a business 
transaction; 

transmitting the identification code (UID/SID and card ID) of the input 
device (10) to a second server (46) connected to the network (44); 

. providing the second server (46) with secure access (48) to the customer 
specific billing information (DBl) on the fir<5t sserver (42); 

conducting a transaction at a desired location (50); and 

billing the customer Independently of the transaction. 

2. A method as in claim 1 wherein the Step of locating a desired location 
(50) on the network (44) to conduct business transactions comprises inserting 
a card (32) into the input device (10) with the location of the desired location 
(50) on the network (44), 

3. A method as in claim 2 wherein the step of inserting o card (32) into the 
input device (10) includes the step of inserting a card (32) with a unique serial 
number associated With the card (32). 

4. A method as In claim 2 wherein the step of inserting a card (32) into the 
input device (10) includes the step of downloading a unique serial number onto 
the card (32). 

b. A method as in claim 2 wherein the step of locating a desired location 
(50) on the net wo. k (44) to conduct a buoinece transaction comprises inserting 
a smart card (32) into the input device (10) with the location of a desired 
location (00) on the network (44). 
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6. A method as in claim 6 including the step of downloading and «t ring on 
the amart card (32) a unique serial number from the second s rver (46). 

7 A method as in claim 1 wherein the step of locating a desired location 
(50) on the network (44) comprices providing potential customers with smart 
cards (32) with a location (50) of a site on the network (44) stored on th« smart 
card (32). 

8. • A method as in claim 1 wherein the step of transmitting the IdB.itification 
code (UID/SID and card ID) of the input device (10) to a second server (46) 
connected to the network (44) also Includes the Step of transferring a passcode 
to the second server (46). 

9. A method as in claim 1 including the step of grouping the first server (42). 
the aecond server (46) and the desired location (50) on the network (44) in the 
same location. 

10. A method of conducting a secured transaction on the Internet (44) 
comprising: 

storing customer specific billing information (DBl) on o first ccrver (42) 
connected to the Internet (44) along with the unique identification code (UID/SID 
and card ID) for a customer's input device (10) prior to any transactions; 

locating a desired location (50) on the Internet (44) to conduct a business 
transaction; 

transmitting the idenllfication code (UlD/SID and card ID) of the input 
device (10) to a second server (46) connected to the Internet (44); 

providing the second server (46) with secure access (48) to the customer 
specific informalion (DBl) on the first server (42); 

conducting a transaction at a desired location (50) on the Internet (44); 

and 

billing the customer independently of the transaction. 

11. A method as in claim 10 wherein the step of locating a desirftri Inration 
(50) on the Internet (44) to conduct business transactions compri.«?es inserting a 
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card (32) into the Input device (10) which has stored thereon a doeired location 
(50) on the Internet (A4). 

1 2. A method as in claim 1 1 wherein the step of inserting a card (32) into the 
input device (10) includes The step of inserting a cord (32) with a unique serial 
number associated with the card (32). 

13. A method as in claim 1 1 wherein the step of inserting a card (32) intn the 
input device (10) includes The step of downloading onto the card (32) a unique 
serial number from the second server (46). 

14. A method as In claim 1 1 wherein the step of Inserting a card (32) into the 
input device (10) Includes the step of inserting a smart card (32) into the input 
dfivice (10) and the step of down loading and storing on the smart card (32) a 
unique serial number from the second server (46). 

1 5. A method as in claim 1 1 wherein the step of locating a desired location 
(50) on the Inlernet (44) to conduct a business transaction comprises Inserting 
a smart card (32) into the input device (10) with the location of a desired 
location (50) on the Internet (44). 

1 6. A method as in claim 1 1 wherein the step ot locating a desired localiori 
(50) on the network (44) comprises providing potential customers with smart 
cards (32) with a location of a site on the Internet (44) stored on the smart card 
(32). 

17. A method as in claim 1 1 wherein the step of transmitting the 
identification code (UID/SID and card ID) of the inPUT device (10) to a second 
server (46) connected to the network (44) also Includes the step of transferring 
a pQsscode to the second server (46). 

1 8. A method of conducting a secured purchasing transaction on the Internet 
(44) comprising: 

providing a unique identificailon code (UID/SID and cord ID) in a set top 
box browser (10) for use with a television receiver (12) at a customer's 
location; 
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Storing th unique identification code (UID/SID and card ID) on a first 
server (42) connected t the Internet (44) along with custom r billing and/or 
financial Information (DBl) prior to conducting any purchase traneections; 

connecting the customer to a selected location (50) on the Intern t (44) 
to conduct a purchase transaction; 

transmitting the identification code (UID/SID a,.d card ID) of the set top 
box browser (10) to a second sen/er (46) connected to the Internet (44); 

providing the second server (46) with access (48) to the customer billing 
and or/financial information (DBl) in a secured manner; 

conducting a purchase transaction at the desired location (50) on the 

Internet (44); and 

billing the customer independently of the transaction at the selected 

location. 

1 9. A method as In daim 1 8 wherein the step of connecting the customer to 
a selected Internet (44) location comprises inserting a smart card (3Z) into the 
set top box browser (10) with the location of the selected location on the 
Internet (44). 

20. A method as in claim 1 9 including the additional step ot providing a serial 
number associated with the smart oard (32) to the second server (46). 

21 . A method as in claim 1 9 including the additional step ot downloading 
information from the selected location on the Internet (44) to the smart card 
(32). 

22 A method as In claim 1 8 wherein the step of connecting the customer to 
a selected Internet (44) location comprises inserting a smart card (32). provided 
by d vendor which includes the vendor's location on the Internet (44). into the 
set top box browser (10). 

23. An apparatus for performing secure business transactions on d network 
(44) comprising: 

Q customer input device (10) having a unique identification code (UID/SID 
and oard ID); 
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means for storing customer specific billing information {DBD on a first 
server (42) connected to the n tworic (44) along with the unique identification 
code (UID/SID end card ID) prior to any transactions: 

means for locating a desired site (50) on the networic (44) to conduct a 

business transaction; 

means for transmitting the Identification code (UID/SID and card ID) to a 

second server (46) connected to The network (44); 

means for providing the second server |46) with secure ocoese (48) to the 
customer specific information (DBD on the first server (42); 

means for conducting a transaction at a desired location (60) ; and 
means for billing the customer independently of the transaction. 
2-1. The apparatus of claim 23 wherein the means for locating a desired site 
on the network (44) comprises a card (32) which is inserted into the input 
device (10) with the location of the desired site on the network (44). 

25. The apparatus of claim 24 wherein the card (32) is a smart card (32). 

26. Thft apparatus of claim 23 including means for providing a serial number 
assor.iated with the smarl card (32) to the second server (46). 

27. The apparatus of claim 23 wherein the first server (42), the second server 
(46) and the desired site are all located together. 

28. The apparatus of claim 23 wherein the Input device (1 0) is a set top box 
browser (10) for a television- 

29. A method of conducting a eecured transaction on The Internet (44) 

comprising the steps' of: 

embedding a unique identification (UID/SID and card ID) in a customer 

input device (10); 

performing a transaction at a shopping server (50) through a second 
servei (4(3) having Qccees to the unique identification (UID/SID and card ID) of 

Ihe input device (10); 

storing customer billing Information (DBD ou a first server (42); 
communicating between the second server (46) and a first server (42) 

over a secured line that a transaction has taKwi place. 
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30. The method of claim 20 Including the additional step of billir.g the 
customer based upon the billing Information in the first server (42). 

31 . The method of claim 29 Including the additional step of locating the first 
(42) server and the second server (46) together. 

32. The method of claim 29 including the additional step of combining the 
functions of the second server (46) and the shopping server (50) into a oingle 
stjiver. 

33. A method of allowing a customer to easily gain access to a eite on the 

Internet (44) comprising: 

distributing a card (32) containing the URL location of a website; and 
inserting the card (32) within a customer's Internet (44) access device. 

34. The method of claim 33 wherein the step of distributing a card (32) 
inolodes the step of distributing a smart card (32). 

35. The method of claim 33 wherein the step of inserting the card (32) 
includes the step of providing the card (32) with a unique identification code 
(card ID). 
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